[update] add hmac encryption & test